This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: Zx/Y1TsVvjKOLRuF5YHI0jNzjAwOoKcfrexIKrHK4oM= Subject key identifier: 3B:06:FE:68:D9:45:90:6D:80:9F:E6:C3:08:BD:0A:A9:14:88:2D:B1 Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 2CCC02D8E00C87A6C07A0F91CEB448BF3B6CCAC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 023F Signing time: Wed 17 Dec 2025 12:50:50 +0000 Manifest this update: Wed 17 Dec 2025 12:45:50 +0000 Manifest next update: Sat 20 Dec 2025 16:42:50 +0000 Files and hashes: 1: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: Liu2JJF/Hke9blsyjZGznWDUzpmMz97CCE5qH/bjwM4=) 2: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: +6suBy02VBYIADpzrjVT+EfPKFC0O5f32zxYKkvXd28=) 3: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: oyydVMYyKXkpYDIFM7y9X8uh6d+LkiuOE6srFgEvka0=) 4: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: bd57lftDDk/LNoDF2KUhmKXFCa0cbwtrVskfNqH8nl0=) 5: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: amwDD/Sw1ZMDPleCIfQ45Yvn4tCtR3QQCTma/8S3s6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 16:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:cc:02:d8:e0:0c:87:a6:c0:7a:0f:91:ce:b4:48:bf:3b:6c:ca:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Dec 17 12:45:50 2025 GMT Not After : Dec 20 16:42:50 2025 GMT Subject: CN=3B06FE68D945906D809FE6C308BD0AA914882DB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1a:16:e7:9f:5a:f8:bc:84:7a:28:20:e4:0c: d7:3b:29:52:d8:e0:49:72:8f:14:98:eb:11:d8:be: 0d:9a:f8:60:7b:63:c7:d0:04:f6:5d:2d:9f:8b:56: 27:4f:0d:fc:6f:79:d3:be:b3:41:56:82:85:90:66: 55:de:f7:39:75:e2:d8:cb:9b:ca:b6:d0:dc:a9:1b: 85:fd:18:94:91:9f:f5:67:8f:bd:9c:4e:6f:e5:9f: 89:c6:5e:86:e0:53:b6:bd:0d:6b:e2:80:a0:9c:a1: f4:3c:30:b2:16:7f:2b:ef:93:fa:a4:a5:da:1d:b7: 64:0c:6e:02:6b:83:01:cc:1a:a1:4e:dc:f1:f5:10: 47:a4:1d:98:11:58:6d:01:56:da:91:76:74:0a:8c: af:e6:31:b0:3d:f0:39:bb:c5:50:38:1e:59:d5:67: 53:98:46:07:71:8f:bf:d8:07:c0:e8:26:81:2c:b1: d9:db:e8:87:5a:0a:d0:75:a7:13:4a:6a:11:8a:2f: 69:76:92:92:8d:f1:e3:f8:d3:21:c9:f5:43:bc:18: c3:d6:74:5d:84:fc:7c:fa:c1:36:49:64:fa:fa:f5: cc:d1:f4:76:72:ef:88:13:68:df:12:75:ac:0b:86: 45:b5:f5:2e:f5:2b:9d:5b:65:b4:5f:c8:2c:24:5f: 8d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:06:FE:68:D9:45:90:6D:80:9F:E6:C3:08:BD:0A:A9:14:88:2D:B1 X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2e:51:3a:de:33:fd:09:25:72:cc:2a:9c:ad:bd:96:c7:78: e1:cd:09:83:46:91:eb:5d:9d:2c:61:18:74:83:8b:48:4a:de: a7:5b:69:61:a7:8d:5a:e8:e1:a4:ba:d4:cc:3f:74:38:e9:f3: 66:58:9c:7a:ba:1d:43:0a:32:85:c4:85:20:a1:24:b3:16:f9: b4:f8:d4:77:90:a3:db:4f:08:4d:90:66:d0:52:ee:15:d4:40: 8b:38:c5:18:8e:c9:d3:5e:35:83:2c:08:4f:ac:6b:50:ed:e7: bf:50:70:86:28:1a:d2:85:5a:35:4d:9b:2b:a3:fb:87:ff:61: 48:04:8a:8d:c5:b2:52:ca:1d:7d:f7:cf:91:29:e1:42:fa:73: 58:b6:11:eb:62:f9:26:12:64:24:47:c4:5d:d5:4b:b2:c7:ab: 1d:26:ee:19:65:51:23:94:32:9b:d0:6e:8d:98:6e:f6:b7:81: d3:65:a9:fd:fc:c9:1e:a4:85:5e:0e:e9:7e:fb:c8:22:02:6e: f1:ca:5f:28:c6:a5:c9:75:51:24:e9:2b:cd:4e:be:24:8d:e6: 18:38:0a:d9:fb:6c:01:a6:a7:77:0d:21:6a:00:5a:e9:2c:b0: bf:1c:a1:8e:c3:25:d6:c5:02:92:0d:11:60:7d:aa:e0:29:fb: 64:73:2d:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULMwC2OAMh6bAeg+RzrRIvztsysMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNTEyMTcxMjQ1NTBaFw0yNTEyMjAxNjQyNTBaMDMxMTAvBgNV BAMTKDNCMDZGRTY4RDk0NTkwNkQ4MDlGRTZDMzA4QkQwQUE5MTQ4ODJEQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjGhbnn1r4vIR6KCDkDNc7KVLY 4ElyjxSY6xHYvg2a+GB7Y8fQBPZdLZ+LVidPDfxvedO+s0FWgoWQZlXe9zl14tjL m8q20NypG4X9GJSRn/Vnj72cTm/ln4nGXobgU7a9DWvigKCcofQ8MLIWfyvvk/qk pdodt2QMbgJrgwHMGqFO3PH1EEekHZgRWG0BVtqRdnQKjK/mMbA98Dm7xVA4HlnV Z1OYRgdxj7/YB8DoJoEssdnb6IdaCtB1pxNKahGKL2l2kpKN8eP40yHJ9UO8GMPW dF2E/Hz6wTZJZPr69czR9HZy74gTaN8SdawLhkW19S71K51bZbRfyCwkX407AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOwb+aNlFkG2An+bDCL0KqRSILbEwHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMuUTreM/0JJXLMKpytvZbHeOHNCYNGketd nSxhGHSDi0hK3qdbaWGnjVro4aS61Mw/dDjp82ZYnHq6HUMKMoXEhSChJLMW+bT4 1HeQo9tPCE2QZtBS7hXUQIs4xRiOydNeNYMsCE+sa1Dt579QcIYoGtKFWjVNmyuj +4f/YUgEio3FslLKHX33z5Ep4UL6c1i2Eeti+SYSZCRHxF3VS7LHqx0m7hllUSOU MpvQbo2Ybva3gdNlqf38yR6khV4O6X77yCICbvHKXyjGpcl1USTpK81OviSN5hg4 Ctn7bAGmp3cNIWoAWukssL8coY7DJdbFApINEWB9quAp+2RzLdY= -----END CERTIFICATE-----Generated at Fri Dec 19 12:58:25 2025 by rpki-client